org.apache.hop:hop-transform-snowflake-bulkloader (>=2.7.0, <=2.9.0), org.apache.nifi:nifi-snowflake-processors (>=1.24.0, <=2.0.0-m1) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.3)

net.snowflake:snowflake-jdbc MAVEN version 3.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.hop:hop-transform-snowflake-bulkloader =2.7.0, =1.24.0, =1.24.0, =1.24.0, =1.24.0, =1.24.0,...

com.snowflake:snowpark (1.9.0), io.github.stewartbryson.snowflake:io.github.stewartbryson.snowflake.gradle.plugin (>=2.1.5, <=2.1.11) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.14.1)

net.snowflake:snowflake-jdbc MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowpark 1.9.0 -...

io.smartdatalake:sdl-snowflake_2.11 (>=1.2.4, <=1.3.2), io.smartdatalake:sdl-snowflake_2.12 (>=1.2.4, <=2.1.1) +4 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.12.17)

net.snowflake:snowflake-jdbc MAVEN version 3.12.17 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.smartdatalake:sdl-snowflake2.11 =1.2.4, =1.2.4, =2.8.4-spark2.3, =2.8.4-spark2.4, =7.5.4, =7.5.4,...

CVE-2026-68494 vulnerabilities

Vulnerabilities for packages: gradle, wildfly, cass-config-builder, tez, logstash, apache-nifi-registry, spark, apache-nifi, dependency-track, spdx-tools-java, apache-tika, scala, flyway, akhq, trino, keycloak, sonarqube, opensearch, infinispan, strimzi-kafka-operator, keycloak-config-cli,...

GHSA-642R-3GJ9-2PJ5 vulnerabilities

Vulnerabilities for packages: gradle, wildfly, cass-config-builder, tez, logstash, apache-nifi-registry, spark, apache-nifi, dependency-track, spdx-tools-java, apache-tika, scala, flyway, akhq, trino, keycloak, sonarqube, opensearch, infinispan, strimzi-kafka-operator, keycloak-config-cli,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: flyway-fips, kserve-modelmesh, apache-nifi, logstash, wazuh-indexer, apache-polaris-fips, flink-kubernetes-operator, drain-cleaner, apache-polaris, ontop, opensearch-fips, hono, pinot, cruise-control, cass-config-builder-fips, metabase, jenkins-plugin-manager,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: flyway-fips, kserve-modelmesh, apache-nifi, logstash, wazuh-indexer, apache-polaris-fips, flink-kubernetes-operator, drain-cleaner, apache-polaris, ontop, opensearch-fips, hono, pinot, cruise-control, cass-config-builder-fips, metabase, jenkins-plugin-manager,...

PT-2026-105765

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=560242604 Crash type: Security exception Crash state: com.code intelligence.jazzer.sanitizers.RegexInjection.hookInternal com.code intelligence.jazzer.sanitizers.RegexInjection.patternHook...

flyway:LocationFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/flyway/flyway.git Detailed Report: https://oss-fuzz.com/testcase?key=4795365182996480 Project: flyway Fuzzing Engine: libFuzzer Fuzz Target: LocationFuzzer Job Type: libfuzzerasanflyway Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2026-55857 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, camunda, flyway-fips, keycloak, metabase, reposilite, flyway, airbyte-platform, debezium, keycloak-fips, camunda-zeebe, zipkin, airbyte-platform-fips...

GHSA-G9JJ-CGMH-9F38 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, camunda, flyway-fips, keycloak, metabase, reposilite, flyway, airbyte-platform, debezium, keycloak-fips, camunda-zeebe, zipkin, airbyte-platform-fips...

GHSA-QXVW-FVWX-5CP7 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, camunda, flyway-fips, keycloak, metabase, reposilite, flyway, airbyte-platform, debezium, keycloak-fips, camunda-zeebe, zipkin, airbyte-platform-fips...

GHSA-XVR9-35CR-46V9 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, camunda, flyway-fips, keycloak, metabase, reposilite, flyway, airbyte-platform, debezium, keycloak-fips, camunda-zeebe, zipkin, airbyte-platform-fips...

CVE-2026-55856 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, camunda, flyway-fips, keycloak, metabase, reposilite, flyway, airbyte-platform, debezium, keycloak-fips, camunda-zeebe, zipkin, airbyte-platform-fips...

CVE-2026-55858 vulnerabilities

Vulnerabilities for packages: request-9047-keycloak-fips, camunda, flyway-fips, keycloak, metabase, reposilite, flyway, airbyte-platform, debezium, keycloak-fips, camunda-zeebe, zipkin, airbyte-platform-fips...

CVE-2026-55856 vulnerabilities

Vulnerabilities for packages: keycloak, debezium, flyway, zipkin...

CVE-2026-55857 vulnerabilities

Vulnerabilities for packages: keycloak, debezium, flyway, zipkin...

GHSA-G9JJ-CGMH-9F38 vulnerabilities

Vulnerabilities for packages: keycloak, debezium, flyway, zipkin...

GHSA-XVR9-35CR-46V9 vulnerabilities

Vulnerabilities for packages: keycloak, debezium, flyway, zipkin...

CVE-2026-55858 vulnerabilities

Vulnerabilities for packages: keycloak, debezium, flyway, zipkin...